@undefineds.co/xpod 0.3.29 → 0.3.32

package/dist/api/store/DrizzleClientCredentialsStore.js

@@ -1,115 +0,0 @@
-"use strict";
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.DrizzleClientCredentialsStore = void 0;
-const drizzle_orm_1 = require("drizzle-orm");
-const global_logger_factory_1 = require("global-logger-factory");
-const schema_pg_1 = require("../../identity/drizzle/schema.pg");
-const schema_sqlite_1 = require("../../identity/drizzle/schema.sqlite");
-/**
- * Storage for API Keys (client credentials) using Drizzle ORM
- *
- * Only stores clientId → webId/accountId mapping.
- * The actual clientSecret lives in the sk-xxx token and is never persisted.
- */
-class DrizzleClientCredentialsStore {
-    constructor(options) {
-        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
-        this.db = options.db;
-        this.apiClientCredentials = options.isSqlite ? schema_sqlite_1.apiClientCredentials : schema_pg_1.apiClientCredentials;
-    }
-    /**
-     * Store API Key registration (called when user creates API Key via frontend)
-     */
-    async store(options) {
-        await this.db
-            .insert(this.apiClientCredentials)
-            .values({
-            clientId: options.clientId,
-            webId: options.webId,
-            accountId: options.accountId,
-            displayName: options.displayName ?? null,
-        })
-            .onConflictDoUpdate({
-            target: this.apiClientCredentials.clientId,
-            set: {
-                displayName: options.displayName ?? null,
-            },
-        });
-        this.logger.info(`Stored API Key: ${options.clientId}`);
-    }
-    /**
-     * Find by client_id (the "API Key")
-     */
-    async findByClientId(clientId) {
-        const rows = await this.db
-            .select()
-            .from(this.apiClientCredentials)
-            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.clientId, clientId))
-            .limit(1);
-        if (rows.length === 0) {
-            return undefined;
-        }
-        const row = rows[0];
-        return {
-            clientId: row.clientId,
-            webId: row.webId,
-            accountId: row.accountId,
-            displayName: row.displayName ?? undefined,
-            createdAt: row.createdAt,
-        };
-    }
-    /**
-     * List API Keys for an account
-     */
-    async listByAccount(accountId) {
-        const rows = await this.db
-            .select({
-            clientId: this.apiClientCredentials.clientId,
-            webId: this.apiClientCredentials.webId,
-            displayName: this.apiClientCredentials.displayName,
-            createdAt: this.apiClientCredentials.createdAt,
-        })
-            .from(this.apiClientCredentials)
-            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.accountId, accountId))
-            .orderBy((0, drizzle_orm_1.sql) `${this.apiClientCredentials.createdAt} DESC`);
-        return rows.map((row) => ({
-            clientId: row.clientId,
-            webId: row.webId,
-            displayName: row.displayName ?? undefined,
-            createdAt: row.createdAt,
-        }));
-    }
-    /**
-     * Find the most recently created API Key for an account.
-     */
-    async findByAccountId(accountId) {
-        const rows = await this.db
-            .select()
-            .from(this.apiClientCredentials)
-            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.accountId, accountId))
-            .orderBy((0, drizzle_orm_1.sql) `${this.apiClientCredentials.createdAt} DESC`)
-            .limit(1);
-        if (rows.length === 0) {
-            return undefined;
-        }
-        const row = rows[0];
-        return {
-            clientId: row.clientId,
-            webId: row.webId,
-            accountId: row.accountId,
-            displayName: row.displayName ?? undefined,
-            createdAt: row.createdAt,
-        };
-    }
-    /**
-     * Delete an API Key
-     */
-    async delete(clientId, accountId) {
-        await this.db
-            .delete(this.apiClientCredentials)
-            .where((0, drizzle_orm_1.eq)(this.apiClientCredentials.clientId, clientId));
-        return true;
-    }
-}
-exports.DrizzleClientCredentialsStore = DrizzleClientCredentialsStore;
-//# sourceMappingURL=DrizzleClientCredentialsStore.js.map

package/dist/api/store/DrizzleClientCredentialsStore.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"DrizzleClientCredentialsStore.js","sourceRoot":"","sources":["../../../src/api/store/DrizzleClientCredentialsStore.ts"],"names":[],"mappings":";;;AAAA,6CAAsC;AACtC,iEAAqD;AAErD,gEAAkG;AAClG,wEAA0G;AAW1G;;;;;GAKG;AACH,MAAa,6BAA6B;IAKxC,YAAmB,OAA6C;QAJ/C,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK3C,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,CAAC;QACrB,IAAI,CAAC,oBAAoB,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,oCAA0B,CAAC,CAAC,CAAC,gCAAsB,CAAC;IACrG,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,KAAK,CAAC,OAKlB;QACC,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACjC,MAAM,CAAC;YACN,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;SACzC,CAAC;aACD,kBAAkB,CAAC;YAClB,MAAM,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ;YAC1C,GAAG,EAAE;gBACH,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,IAAI;aACzC;SACF,CAAC,CAAC;QAEL,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,mBAAmB,OAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAC1D,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,cAAc,CAAC,QAAgB;QAC1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;aACvD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAC,SAAiB;QAM1C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,CAAC;YACN,QAAQ,EAAE,IAAI,CAAC,oBAAoB,CAAC,QAAQ;YAC5C,KAAK,EAAE,IAAI,CAAC,oBAAoB,CAAC,KAAK;YACtC,WAAW,EAAE,IAAI,CAAC,oBAAoB,CAAC,WAAW;YAClD,SAAS,EAAE,IAAI,CAAC,oBAAoB,CAAC,SAAS;SAC/C,CAAC;aACD,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzD,OAAO,CAAC,IAAA,iBAAG,EAAA,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,OAAO,CAAC,CAAC;QAE7D,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,GAAwB,EAAE,EAAE,CAAC,CAAC;YAC7C,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC,CAAC,CAAC;IACN,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAC,SAAiB;QAC5C,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,EAAE;aACvB,MAAM,EAAE;aACR,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC;aAC/B,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;aACzD,OAAO,CAAC,IAAA,iBAAG,EAAA,GAAG,IAAI,CAAC,oBAAoB,CAAC,SAAS,OAAO,CAAC;aACzD,KAAK,CAAC,CAAC,CAAC,CAAC;QAEZ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACtB,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO;YACL,QAAQ,EAAE,GAAG,CAAC,QAAQ;YACtB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,SAAS,EAAE,GAAG,CAAC,SAAS;YACxB,WAAW,EAAE,GAAG,CAAC,WAAW,IAAI,SAAS;YACzC,SAAS,EAAE,GAAG,CAAC,SAAS;SACzB,CAAC;IACJ,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,MAAM,CAAC,QAAgB,EAAE,SAAkB;QACtD,MAAM,IAAI,CAAC,EAAE;aACV,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC;aACjC,KAAK,CAAC,IAAA,gBAAE,EAAC,IAAI,CAAC,oBAAoB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AA3HD,sEA2HC","sourcesContent":["import { eq, sql } from 'drizzle-orm';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { IdentityDatabase } from '../../identity/drizzle/db';\nimport { apiClientCredentials as pgApiClientCredentials } from '../../identity/drizzle/schema.pg';\nimport { apiClientCredentials as sqliteApiClientCredentials } from '../../identity/drizzle/schema.sqlite';\nimport type { ClientCredentialsRecord, ClientCredentialsStore } from '../auth/ClientCredentialsAuthenticator';\n\nexport interface DrizzleClientCredentialsStoreOptions {\n  db: IdentityDatabase;\n  /**\n   * Whether using SQLite (default: false for PostgreSQL)\n   */\n  isSqlite?: boolean;\n}\n\n/**\n * Storage for API Keys (client credentials) using Drizzle ORM\n *\n * Only stores clientId → webId/accountId mapping.\n * The actual clientSecret lives in the sk-xxx token and is never persisted.\n */\nexport class DrizzleClientCredentialsStore implements ClientCredentialsStore {\n  private readonly logger = getLoggerFor(this);\n  private readonly db: IdentityDatabase;\n  private readonly apiClientCredentials: typeof pgApiClientCredentials | typeof sqliteApiClientCredentials;\n\n  public constructor(options: DrizzleClientCredentialsStoreOptions) {\n    this.db = options.db;\n    this.apiClientCredentials = options.isSqlite ? sqliteApiClientCredentials : pgApiClientCredentials;\n  }\n\n  /**\n   * Store API Key registration (called when user creates API Key via frontend)\n   */\n  public async store(options: {\n    clientId: string;\n    webId: string;\n    accountId: string;\n    displayName?: string;\n  }): Promise<void> {\n    await this.db\n      .insert(this.apiClientCredentials)\n      .values({\n        clientId: options.clientId,\n        webId: options.webId,\n        accountId: options.accountId,\n        displayName: options.displayName ?? null,\n      })\n      .onConflictDoUpdate({\n        target: this.apiClientCredentials.clientId,\n        set: {\n          displayName: options.displayName ?? null,\n        },\n      });\n\n    this.logger.info(`Stored API Key: ${options.clientId}`);\n  }\n\n  /**\n   * Find by client_id (the \"API Key\")\n   */\n  public async findByClientId(clientId: string): Promise<ClientCredentialsRecord | undefined> {\n    const rows = await this.db\n      .select()\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.clientId, clientId))\n      .limit(1);\n\n    if (rows.length === 0) {\n      return undefined;\n    }\n\n    const row = rows[0];\n    return {\n      clientId: row.clientId,\n      webId: row.webId,\n      accountId: row.accountId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    };\n  }\n\n  /**\n   * List API Keys for an account\n   */\n  public async listByAccount(accountId: string): Promise<Array<{\n    clientId: string;\n    webId: string;\n    displayName?: string;\n    createdAt: Date;\n  }>> {\n    const rows = await this.db\n      .select({\n        clientId: this.apiClientCredentials.clientId,\n        webId: this.apiClientCredentials.webId,\n        displayName: this.apiClientCredentials.displayName,\n        createdAt: this.apiClientCredentials.createdAt,\n      })\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.accountId, accountId))\n      .orderBy(sql`${this.apiClientCredentials.createdAt} DESC`);\n\n    return rows.map((row: typeof rows[number]) => ({\n      clientId: row.clientId,\n      webId: row.webId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    }));\n  }\n\n  /**\n   * Find the most recently created API Key for an account.\n   */\n  public async findByAccountId(accountId: string): Promise<ClientCredentialsRecord | undefined> {\n    const rows = await this.db\n      .select()\n      .from(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.accountId, accountId))\n      .orderBy(sql`${this.apiClientCredentials.createdAt} DESC`)\n      .limit(1);\n\n    if (rows.length === 0) {\n      return undefined;\n    }\n\n    const row = rows[0];\n    return {\n      clientId: row.clientId,\n      webId: row.webId,\n      accountId: row.accountId,\n      displayName: row.displayName ?? undefined,\n      createdAt: row.createdAt,\n    };\n  }\n\n  /**\n   * Delete an API Key\n   */\n  public async delete(clientId: string, accountId?: string): Promise<boolean> {\n    await this.db\n      .delete(this.apiClientCredentials)\n      .where(eq(this.apiClientCredentials.clientId, clientId));\n    return true;\n  }\n}\n"]}